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DETAILED ACTION 

Claims 13-18, 25-30 were pending in the application. 
Claims 13-18, 25-30 are allowed over prior art of record. 

Examiner's Statement of Reasons for Allowance 

The following is an examiner's statement of reasons for the indication of 
allowable claimed subject matter. 

Prior art of record directed to Gullman et al. disclose a system including a 
biometric security apparatus, an access device, and a host system. The biometric security 
apparatus and access device work together to authenticate users as a security safeguard 
for the host system by combining biometric data with other identifying and control data 
to issue a security token that the host system evaluates to determine if a user is authorized 
to access the host system. The biometric security apparatus can be embodied in a portable 
integrated circuit. As in claim 13, Gullman et al. utilize possession-based data in the form 
of a fixed code stored in ROM 24 on the biometric security apparatus. Gullman et al. can 
also utilize knowledge-data, in the form of a challenge code provided by the host system 
that must be entered by the user as part of the authorization process, the biometric data, 
challenge code, and possession-based data are used to create the security token, which the 
host systems evaluates to determine authentication. 

However, Gullmnn et al. do not provide a modified version of the possession- 
based data instance, which is decrypted to generate a first recovered data instance that is 
interrogated against the possession-based data instance to generate a possession value 
that is used as a component of the security token. Rather, Gullmam et al. use the fixed 



Application/Control Number: 10/060,039 Page 3 

Art Unit: 2131 

code directly as the possession value. Likewise, Gullman et al. de not provide a modified 
version of the biometric-based data instance, which is decrypted to generate a second 
recovered data instance 

Prior art of record directed to Gennaro et al. disclose a biometric authentication 
system having encrypted models. According to Gennaro et al., a biometric model is 
created from a biometric sample, and an encryption key is created from a password input. 
The encryption key is 

used to encrypt the biometric model. During an authentication process, the user enters a 
knowledge-based data instance, that is, his or her password. This password is used to 
create a key that is used to determine the stored encrypted biometric model, which is 
correlated against a newly-provided biometric input. However, the password is never 
used to recover a possession-based data instance from a modified version of the 
possession-based data instance required by independent claims 13 and 25. 

Dependent claims 14-18 and 26-30 are also allowed by virtue of their 
dependencies. 

Conclusion 

Any inquiry concerning this communication or earlier communications from 
examiner should be directed to Taghi Arani, whose telephone number is (703) 305-4274. 
The examiner can normally be reached Monday through Friday from 8:00 AM to 5:30 
PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (703) 305-9648. The Fax numbers for the 
organization where this application is assigned is: 
(703) 872-9306 
Taghi Arani 
Patent Examiner 
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